Description:

Solace is a healthcare advocacy marketplace that connects patients and families to experts who help them understand and take charge of their personal health.
The company is transforming healthcare in the U.S. by addressing the complexity of the system, which leaves 88% of U.S. adults lacking the necessary health literacy.
Solace uses proprietary technology to match patients with experienced advocates, helping individuals and families make informed decisions that lead to better health outcomes.
The company is a Series B startup founded in 2022 and is backed by several venture capital firms.
The Lead Security Engineer will be the first security engineering hire and will build out the security department from scratch.
This role involves securing patient-facing and internal web applications, protecting sensitive health data, and shaping the security posture of the platform.
Responsibilities include owning web application security, promoting a security-first culture, analyzing features for security risks, conducting threat modeling and vulnerability assessments, and ensuring compliance with HIPAA and SOC 2.
The engineer will monitor and respond to potential threats, lead investigations of security incidents, and provide training and mentorship on secure development practices.

Requirements:

Candidates must have experience working in a start-up environment.
A minimum of 8 years of experience in web application security or related engineering roles is required.
Proficiency with secure web development and auditing practices, including input validation and encryption, is necessary.
Experience with threat modeling, vulnerability scanning tools, and manual security testing is essential.
Familiarity with regulatory and compliance frameworks is required.
Experience in healthcare or other regulated industries, along with knowledge of implementing HIPAA compliant software, is preferred.
Applicants must be based in the United States as this is a remote position.

The position offers the opportunity to be a critical hire in a growing startup, allowing for significant impact on the company's security practices.
Employees will have the chance to shape the security culture and processes from the ground up.
The role provides the flexibility of a fully remote work environment.
Solace promotes a collaborative and innovative work culture, encouraging personal and professional growth.